Project

General

Profile

Download (405 Bytes)

Bug #4403 ยป lol.py

Philippe Antoine, 03/24/2021 08:46 PM

 
transforms=[
"strip_whitespace",
"compress_whitespace",
"dotprefix",
"url_decode",
]

def dotransform(sid):
tr = []
while sid > 0:
tr.append(transforms[int(sid) & 3])
sid = sid//4
return ";".join(tr)

for sid in range(0x10000):
rule = "alert tcp any any -> any any (file.data;" +dotransform(sid+1)+ ';content:"contsp"; sid:' + str(sid+1) + ';)'
print(rule)
    (1-1/1)